CVE-2017-3574
First published: Mon Apr 24 2017(Updated: )
Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA License code configuration). Supported versions that are affected are 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x and 5.5.1.x. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality OPERA 5 Property Services accessible data as well as unauthorized update, insert or delete access to some of Oracle Hospitality OPERA 5 Property Services accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Hospitality OPERA | =5.4.0 | |
| Oracle Hospitality OPERA | =5.4.1 | |
| Oracle Hospitality OPERA | =5.4.2 | |
| Oracle Hospitality OPERA | =5.4.3 | |
| Oracle Hospitality OPERA | =5.5.0 | |
| Oracle Hospitality OPERA | =5.5.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-3574?
CVE-2017-3574 is categorized as an easily exploitable vulnerability in Oracle Hospitality OPERA 5 Property Services.
How do I fix CVE-2017-3574?
To address CVE-2017-3574, update your Oracle Hospitality OPERA 5 Property Services to a patched version provided by Oracle.
Which versions are affected by CVE-2017-3574?
CVE-2017-3574 affects Oracle Hospitality OPERA versions 5.4.0.x, 5.4.1.x, 5.4.2.x, 5.4.3.x, 5.5.0.x, and 5.5.1.x.
What are the potential impacts of CVE-2017-3574?
Exploitation of CVE-2017-3574 could lead to unauthorized access to sensitive information and services in Oracle Hospitality OPERA.
Is there a workaround for CVE-2017-3574?
Currently, the recommended approach for CVE-2017-3574 is to apply the available updates as there may be no reliable workaround.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/severity
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/oracle
- canonical/oracle hospitality opera
- version/oracle hospitality opera/5.4.0
- version/oracle hospitality opera/5.4.1
- version/oracle hospitality opera/5.4.2
- version/oracle hospitality opera/5.4.3
- version/oracle hospitality opera/5.5.0
- version/oracle hospitality opera/5.5.1